Privacy Policy

1. Controller

Controller in terms of data protection laws (especially GDPR) is:

Klypse.app
Operated by: Christoffer Sidiropoulos
Breslauer Straße 32
26419 Schortens
Germany
E-mail: [email protected]

2. Data we process

We process the following categories of data when you use Klypse:

• Account data: e-mail address, password hash, language settings, Stripe customer ID, credit balance, plan type.
• Usage data: uploaded videos, generated clips, transcripts, captions, AI-generated social copy, job metadata (duration, processing mode, status), timestamps and interactions inside the dashboard.
• Technical data: IP address, device and browser information, time and date of access, referrer, basic log files.
• Billing data: limited payment information provided by Stripe (e.g. last 4 digits of card, country, timestamps, payment status). We do not store full credit card numbers.
• Analytics data: pseudonymous usage statistics via Google Analytics, if you have consented.

3. Purposes and legal bases

We process your data for the following purposes and legal bases:

• Provision of the app and website (Art. 6(1)(b) GDPR): To operate Klypse, provide your account, process your videos and deliver the generated clips and captions.
• Billing and payment handling (Art. 6(1)(b), (c) GDPR): To manage subscriptions, credit packs, invoices and comply with tax and accounting obligations.
• Security and abuse prevention (Art. 6(1)(f) GDPR): To prevent misuse, secure our infrastructure and investigate incidents.
• Analytics and product improvement (Art. 6(1)(a), (f) GDPR): With your consent, we use analytics to understand how Klypse is used and to improve the product.
• Legal obligations (Art. 6(1)(c) GDPR): To comply with statutory retention periods and legal requirements.

4. Processors and third-party services

We rely on carefully selected service providers to operate Klypse. They act as processors under Art. 28 GDPR and process data only on our instructions.

4.1 Supabase

We use Supabase as our main backend platform for authentication, databases and storage. Supabase processes account data, video/job metadata and other information that you store in Klypse. Data may be hosted in the EU with secure connections to other regions where necessary. Supabase acts as our data processor.

4.2 Google Cloud

Our processing workers (video, audio and AI pipelines) run on Google Cloud, for example via Cloud Run and related services. In this context, uploaded videos, audio, transcripts and technical log data are processed. Google Cloud infrastructure is operated by Google Ireland Limited and Google LLC (USA). We use appropriate safeguards such as Standard Contractual Clauses where data may be transferred outside the EU.

4.3 Cloudflare

We use Cloudflare for performance, security and content delivery (e.g. serving video files or assets). Cloudflare may process IP addresses and technical request data to filter malicious traffic and speed up content delivery.

4.4 OpenAI

For transcription and AI features (e.g. Whisper-based transcription, generating clip suggestions or social copy), we use services from OpenAI. In this context, audio, text transcripts and prompts containing parts of your content may be transmitted to OpenAI. We use these services solely to provide the Klypse features to you. Where possible, data is pseudonymised and we avoid sending unnecessary personal data.

4.5 Stripe

Payments, subscriptions and invoices are processed via Stripe (Stripe Payments Europe Limited and affiliated entities). Stripe receives payment information, billing data and technical data necessary to process transactions. Klypse does not store full credit card numbers.

4.6 Google Analytics

With your consent, we use Google Analytics to analyse the use of our website and app. Google Analytics uses cookies or similar technologies to collect pseudonymous information about device type, browser, page views and interactions. IP addresses are shortened and only processed in an anonymised form where technically possible.

You can control the use of Google Analytics via the cookie consent banner and our Cookie Policy.

5. Cookies and consent

We use cookies and similar technologies to run Klypse and to offer optional analytics. Technically necessary cookies are required to operate the service (e.g. session cookies, security features). Optional cookies are only used with your consent (e.g. Google Analytics).

You can manage your preferences at any time via the cookie banner or our Cookie Policy.

6. Storage periods

We store personal data only as long as necessary for the purposes described above or as required by law. This includes:

• Account data: for the duration of your account and statutory retention periods.
• Billing data: according to tax and commercial law obligations (usually 6–10 years).
• Log data: typically for a few weeks to ensure security and debugging, unless needed longer for incident analysis.
• Uploaded videos and generated clips: as long as they are stored in your Klypse workspace or as configured by you.

7. Your rights

Under the GDPR you have, in particular, the following rights (where applicable):

• Right of access to your personal data (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact us at [email protected].

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The current version is always available on this page.